Privacy Policy — RoxPlay66

1Introduction

This Privacy Policy ("Policy") is issued by RoxPlay66 ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting website accessible at roxplay66.cam. This Policy applies to all personal data processed in connection with your registration, use of, and interaction with the RoxPlay66 Platform.

RoxPlay66 is committed to processing personal data in a manner that is lawful, fair, transparent, and consistent with internationally recognised data protection principles. We collect only the data that is necessary for the purposes described in this Policy and retain it no longer than required.

By registering an Account on RoxPlay66 or by continuing to use the Platform after this Policy is published, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein, to the extent that your consent is required.

2Definitions

The following definitions apply throughout this Policy:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, phone number, national identity card number, IP address, and payment account details.
• "Data Controller" — RoxPlay66, being the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — Any third party engaged by RoxPlay66 to process Personal Data on our behalf, in accordance with our instructions.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a specified purpose.
• "KYC" — Know Your Customer identity verification procedures conducted by RoxPlay66 to verify the identity of registered Players.
• "Cookie" — A small text file stored on your device by the Platform to facilitate session management, analytics, and personalisation features.

3Categories of Data We Collect

Depending on your interaction with the Platform, RoxPlay66 may collect the following categories of Personal Data:

4How We Collect Your Data

RoxPlay66 collects Personal Data through the following channels and methods:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, respond to a survey, or communicate with us by any means.
• Automatically: When you access or browse the Platform, our systems automatically collect Technical Data including your IP address, browser type, device information, session duration, and pages visited. This data is collected via server logs, cookies, and similar tracking technologies.
• From third parties: We may receive Personal Data from payment service providers (including Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay) in connection with transaction processing, and from identity verification partners during the KYC process.
• From your use of the Platform: Gaming activity data — including bets placed, game outcomes, and session behaviour — is recorded automatically as a function of the Platform's operation and for the purposes of game integrity, fraud detection, and responsible gambling monitoring.

5Data Processing — Purposes of Use

RoxPlay66 processes your Personal Data for the following specific, legitimate purposes:

1. Account Management: To create, maintain, and administer your Player Account, including processing login credentials, verifying identity, and communicating account-related notifications.
2. KYC Compliance: To verify your identity and age (21+) as required under our international gaming licensing obligations and to prevent fraudulent or underage use of the Platform.
3. Payment Processing: To process deposits and withdrawals through your chosen payment method (including local Malaysian banking and e-wallet integrations) and to maintain accurate financial records.
4. Platform Operation & Security: To detect, investigate, and prevent fraud, money laundering, collusion, and other forms of prohibited conduct, and to maintain the integrity of games and betting markets.
5. Responsible Gambling: To monitor gaming activity for indicators of problem gambling behaviour, to enforce self-exclusion requests and deposit limit settings, and to provide appropriate intervention in accordance with our Responsible Gambling programme.
6. Legal Compliance: To comply with our obligations under applicable international gaming licensing requirements, anti-money laundering (AML) frameworks, and any lawful request from regulatory or law enforcement authorities.
7. Platform Improvement: To analyse usage patterns and player behaviour (on an aggregated, anonymised basis where possible) to improve the Platform's features, performance, game selection, and user experience.
8. Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and relevant product updates. You may withdraw this consent at any time by contacting our support team.

6Legal Basis for Processing

RoxPlay66 processes your Personal Data on the following legal bases, depending on the category of data and the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and RoxPlay66 — i.e., to provide you with access to the Platform, to process deposits and withdrawals, and to administer your Account.
• Legal obligation: Processing required to comply with our obligations under applicable international gaming licensing frameworks, AML regulations, and lawful requests from competent authorities.
• Legitimate interests: Processing for fraud detection, platform security, responsible gambling monitoring, and internal analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, where we rely on your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

7Data Sharing & Disclosure

RoxPlay66 does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. We may, however, share your data in the following strictly limited circumstances:

• Payment Service Providers: We share financial data necessary to process your deposits and withdrawals with the relevant payment processors, including banking institutions (Maybank, CIMB, Public Bank, Hong Leong) and e-wallet operators (Touch 'n Go, Boost, GrabPay, DuitNow, FPX), and cryptocurrency infrastructure providers. These parties act as Data Processors under our instruction.
• KYC & Identity Verification Partners: We may share KYC documentation with approved third-party identity verification service providers who assist us in confirming the authenticity and accuracy of player-submitted documents.
• Game Technology Providers: Certain Technical Data and anonymised game-session data may be shared with our game-supply partners for the purposes of game integrity verification, RNG certification, and technical support.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to competent regulatory or law enforcement authorities if required to do so by law, by court order, or pursuant to our licensing obligations. We will notify you of such disclosure where legally permitted to do so.
• Group Companies: Where RoxPlay66 operates as part of a corporate group, data may be shared with affiliated entities strictly for the purposes of internal administration, compliance, and platform operation.

8Data Retention

RoxPlay66 retains your Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure, to comply with AML and gaming licence audit obligations.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with international financial record-keeping requirements.
• KYC Documentation: Retained for the duration of your Account and for five (5) years following Account closure, subject to any longer period required by our licensing authority.
• Gaming Activity Data: Retained for five (5) years following the relevant session, for the purposes of game integrity verification, dispute resolution, and responsible gambling monitoring.
• Communication and Support Data: Retained for three (3) years from the date of the last communication, unless a longer period is required in connection with an unresolved dispute.
• Technical and Cookie Data: Retained for a maximum of thirteen (13) months, subject to your cookie preferences.

Upon expiry of the applicable retention period, we will securely delete or anonymise your Personal Data in accordance with our internal data destruction procedures.

9Data Security

RoxPlay66 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including KYC documentation and financial account details.
• Role-based access controls limiting staff access to Personal Data to those with a legitimate operational need.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing Personal Data.
• Incident response procedures for the detection, reporting, and remediation of Personal Data breaches.

10Cookies & Tracking Technologies

RoxPlay66 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, and improve your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that maintain your login state and security tokens. They cannot be disabled.
• Performance & Analytics Cookies: Collect anonymised data about how visitors use the Platform — including page visit frequency, error reports, and session duration — to help us improve Platform performance. This data is aggregated and not linked to individual identities.
• Functional Cookies: Remember your preferences and settings (such as language preference and notification settings) to provide a more personalised experience on subsequent visits.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant promotional content and to measure the effectiveness of our marketing activities. You may opt out of marketing cookies at any time.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform and your ability to access certain features.

11Your Rights as a Data Subject

Subject to the legal basis applicable to each processing activity and any overriding legal obligations, you have the following rights in relation to your Personal Data held by RoxPlay66:

To exercise any of these rights, please submit a written request to our Data Privacy team at [email protected]. We will respond to all valid requests within thirty (30) calendar days. We may require you to verify your identity before processing a rights request to protect against unauthorised disclosure.

12Minors & Age Restriction

The RoxPlay66 Platform is strictly for adults aged 21 years and above. We do not knowingly collect or process Personal Data belonging to individuals under the age of 21.

As part of our KYC verification process, all registered Players are required to confirm their age and provide documentary evidence of their date of birth. Any Account identified as belonging to a minor will be immediately suspended, all associated data will be isolated pending review, and any deposited funds will be returned to the source payment method following investigation.

If you believe that we have inadvertently collected Personal Data from a person under the age of 21, please contact us immediately at [email protected] so that we can take prompt corrective action.

13Third-Party Links & Services

The RoxPlay66 Platform does not intentionally include links to external third-party websites for the purpose of directing Players away from the Platform. However, our game content may be sourced from third-party game studios whose underlying software may operate under their own privacy and data practices.

Where we integrate third-party payment services (including banking interfaces for Maybank, CIMB, Public Bank, Hong Leong, and e-wallet providers such as Touch 'n Go, Boost, and GrabPay), your interaction with those payment interfaces may be subject to the privacy policies of the respective service providers. RoxPlay66 is not responsible for the data practices of third-party payment processors or financial institutions.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

14Amendments to This Policy

RoxPlay66 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal and regulatory obligations.

Material changes to this Policy will be communicated to registered Players via the email address associated with their Account and/or via a prominent notice displayed on the Platform. The updated Policy will state the date on which it takes effect.

Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with any changes, you must cease using the Platform and may request Account closure by contacting our support team.

15Contact Us — Data Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by RoxPlay66, please contact our Data Privacy team using the details below. All privacy-related correspondence should reference your registered Account username and specify the nature of your enquiry clearly.

We aim to acknowledge all privacy-related written enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days. Where a request is complex or voluminous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.